This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File:                     W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier:          o6HDNa/m/tIxcMHfhD0BjzqzLFZBY6Z3X4NBnAGdWH4=
Subject key identifier:   CD:47:E1:D4:AE:BB:92:71:7B:22:52:BC:F8:BF:8C:24:28:60:66:46
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer:       /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial:       019AF388FAC87D17052D53884C1630094CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 12:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:31 +0000
Files and hashes:         1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
                          2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: uwwEpfYNDGyoPBeBqD3MuE7GCavLA6UDoGqWTMjJAew=)
                          3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:88:fa:c8:7d:17:05:2d:53:88:4c:16:30:09:4c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
        Validity
            Not Before: Dec  6 12:00:31 2025 GMT
            Not After : Dec  7 12:00:31 2025 GMT
        Subject: CN=cd47e1d4aebb92717b2252bcf8bf8c2428606646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:01:7a:c8:98:26:f2:e4:4b:d8:38:f5:4f:
                    f3:20:d3:aa:e3:c0:b4:88:bd:8c:d0:ea:85:76:98:
                    7d:2f:a3:61:48:1d:98:12:f7:f4:d7:1f:15:1b:2c:
                    43:28:0b:2d:e5:b9:76:b0:52:e4:09:a2:70:79:6d:
                    af:ae:e2:d4:0a:16:98:0e:bf:a5:65:8d:49:41:27:
                    7a:de:2d:2f:90:62:d1:8f:4f:b1:67:43:9f:10:1b:
                    6b:46:4c:67:7e:99:4e:0a:b4:21:41:71:33:57:b2:
                    c0:42:29:74:67:8c:77:d9:0c:9e:84:d3:94:44:5a:
                    15:4d:58:31:c6:da:d4:27:6e:5d:49:fa:ce:01:36:
                    f6:c6:e9:ff:ca:6d:81:a4:f9:41:69:43:ba:60:27:
                    07:94:41:e3:50:ad:9c:b6:f6:e5:40:e0:21:b3:5c:
                    f5:8a:0e:0b:a7:1e:b6:65:40:01:f9:ca:7a:39:b9:
                    c5:03:09:e5:07:68:9c:bc:dd:66:76:6c:c2:b6:2b:
                    d2:49:de:3f:6a:33:a3:11:20:0a:27:81:4d:ea:ad:
                    f4:5c:f6:3a:6b:c2:89:5e:4e:f1:80:dd:20:f3:ad:
                    60:7d:00:b5:4c:6c:ab:34:c0:75:27:69:79:d8:f3:
                    98:a8:80:a2:32:84:2a:4e:25:76:f7:04:e0:b0:a4:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:E1:D4:AE:BB:92:71:7B:22:52:BC:F8:BF:8C:24:28:60:66:46
            X509v3 Authority Key Identifier:
                keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:ac:d1:a8:0c:ac:24:bd:22:39:26:cf:0d:6d:71:39:66:
         b5:07:f8:ee:80:40:73:6d:cc:25:bd:f0:cc:6d:a5:d8:43:ae:
         a3:ae:ee:d4:0c:e0:9b:e9:64:82:75:df:a5:87:cb:2d:69:5d:
         9f:bc:f9:13:66:41:30:16:ea:60:f2:af:44:81:78:d1:87:ce:
         0d:f2:38:b2:62:df:2d:ed:ae:0c:6e:5f:e5:7c:f8:5b:ce:40:
         cc:e1:7b:7d:76:17:1e:20:e8:51:d6:c9:f7:04:9a:da:a9:bb:
         d2:66:1f:9b:60:15:fc:24:48:a1:41:35:d9:17:56:68:47:f5:
         67:e6:46:e4:23:cf:41:6d:1a:6d:cf:af:cd:4e:7d:f0:3d:7e:
         a8:71:a5:29:de:0e:95:5a:4a:41:a1:20:02:4c:5a:eb:2a:3d:
         48:60:27:c9:f9:1a:b0:f8:12:1d:62:d4:bb:cf:77:90:83:85:
         7c:cc:62:9d:6d:ac:de:49:74:ab:09:1f:fa:47:3a:ed:38:91:
         21:4f:73:4a:6a:f0:b9:9a:53:a5:ab:c2:34:a4:24:4f:18:9a:
         d8:7b:a1:62:b1:fb:a9:3d:39:93:cb:bb:28:d9:a5:e6:26:af:
         b8:64:57:08:12:40:36:93:fd:71:cc:41:45:11:98:03:c7:26:
         b5:25:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:32:50 2025 by rpki-client